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T7?e MAILING DATE of this communication appears on the cover sheet with the correspondence address ■ 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 
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I )□ Responsive to communication(s) filed on . 

2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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1 . Claim 1 has been examined. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claim 1 is rejected under 35 U.S.C. 103(a) as being unpatentable over Guski 
(U.S. Patent 6,71 1 ,679), and further in view of Doyle (PCT Patent WO 99/16209). 

Regarding claim 1 , Guski teaches a system to perform a serially chained 
certification process (Guski, column 3 line 57 - column 4, line 4) which comprises the 
steps of having a second server perform a cross-certification such that the first server 
must provide independent proof of its public key, in the form of the digital signature 
which only it could produce with a corresponding private key, at a point in time 
witnessed by the first server (Guski, Figure 3 and also column 7, lines 15-20); and also 
continuing the process to cross-chain an unlimited number of additional servers to form 
a widely witnessed web of digital signatures (Guski, Figure 4 and column 8, lines 9-20). 
It does not teach the use of time intervals and associated public/private key pairs as 
part of its certification process. However, Doyle teaches a system for creating 
irrefutable digital signature timestamps based on the notion of creating public and 
private key pairs for a number of time intervals. In particular, Doyle teaches the steps of 
creating a first interval certification at a server (Doyle, page 13, lines 8-12) and deleting 
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the private key of the interval once the interval has expired (Doyle, page 6, lines 6-10 
and also page 19, lines 26-27). It is also taught that the process can be repeated for 
additional intervals (Doyle, page 13, lines 15-16), creating a chain of irrefutable 
timestamps bearing witness to the interval of time thus certified (Doyle, page 19, lines 
18-21). Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to include the concept of temporal intervals as part of the 
certification process taught by Guski, as well as using the public and private key pairs 
associated with said intervals as the keys used in the digital signatures contained in the 
certificates found in the Guski disclosure. Note that the intended purpose of the Guski 
disclosure was to improve the security of E-commerce transactions, particularly those 
conducted through the use of intermediaries (Guski, column 3, lines 3-22); by including 
accurate timestamps as found in Doyle, one can more easily detect a hacker attempting 

...... . _ . . V 

a replay attack against the system - if the timestamp in the certificate does not match 
that logged by the network hardware on the server, then the contents of the message 
could then be viewed as suspect. 

Further regarding claim 1, note that the only components of the certificates 
explicitly taught by either Guski or Doyle are the server information (in the form of a 
server certificate), expiration date/stop time of the interval (Guski, column 7, lines 27- 
31), the public key of the interval and a digital signature of the submitted data, signed by 
the interval's private key (Doyle, page 13, lines 8-12 and also lines 18-20). The start 
time of an interval chain in UTC and the start time of the interval in UTC are not 
elements of the certificate taught by either reference. However, it would have been 
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obvious to one of ordinary skill in the art at the time the invention was made to include 
those elements as part of the certificate. Possessing this information would make it 
easier for an authenticator to verify that the timestamp does indeed belong to the 
interval that signed it. 

Further regarding claim 1 , note that a digital signature for the interval signed by 
the previous interval's private key is not explicitly taught, although it should be noted 
that the public key representing the current interval is signed by the previous interval's 
private key (Doyle, page 18, lines 13-17). Therefore, it would have been obvious to one 
of ordinary skill in the art at the time the invention was made to include information 
about the current interval in the digital signature of the public key that is already 
included in the certificate. Since the intervals are well-defined units of time (Doyle, page 
1 1 , lines 4-5) and each interval begins when the previous interval ends, any given 
interval has enough information about the next interval to encode it with the public key 
signature; further, by including this information, one can be more certain that the public 
key supplied in the certificate does indeed belong to the new interval immediately 
succeeding the previous one, and that the key is not in fact a valid public key that was 
supplied out of sequence. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tom Gyorfi whose telephone number is (571 ) 272-3849. 
The examiner can normally be reached on 8:00am - 4:30pm Monday - Friday. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571 ) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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